REDHAT-BUG-487742: Integer Overflow

Published Feb 27, 2009

Updated

Multiple integer overflows were found in the Ghostsript's International Color Consortium Format Library (icclib). An attacker could use this flaw to potentially execute arbitrary code by requesting to translate a specially- crafted image file created on one device into another's device native color space via a device file.

Affected Software

1 affected component

Ghostscript icclib

Event History

Feb 27, 2009

Data Sourced

06:20 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-487742?

The severity of REDHAT-BUG-487742 is considered high due to the potential for arbitrary code execution.

How do I fix REDHAT-BUG-487742?

To fix REDHAT-BUG-487742, update the Ghostscript icclib to the latest patched version.

What causes the vulnerability in REDHAT-BUG-487742?

The vulnerability in REDHAT-BUG-487742 is caused by multiple integer overflows in Ghostscript's ICC format library.

Who is affected by REDHAT-BUG-487742?

Users of Ghostscript icclib are affected by REDHAT-BUG-487742, particularly when processing specially-crafted image files.

Can REDHAT-BUG-487742 be exploited remotely?

Yes, REDHAT-BUG-487742 can be exploited remotely if an attacker sends a crafted image file to the vulnerable system.